Data privacy pipeline providing collaborative intelligence and constraint computing

One or more computer storage media storing computer-useable instructions that, when used by one or more computing devices, cause the one or more computing devices to perform operations comprising:

• storing, in a data trustee environment, a representation of a data privacy pipeline defined by a tenant agreement among tenants of the data trustee environment, the data privacy pipeline configured to derive collaborative data from input datasets provided by the tenants without exposing the input datasets;
• ingesting, by a first operation of the data privacy pipeline, data from the input datasets to generate ingested data from two or more of the tenants;
• fusing, by a second operation of the data privacy pipeline, the ingested data from the tenants to generate fused joint data;
• performing, by a third operation of the data privacy pipeline, at least one computation on the fused joint data to generate derived joint data;
• and
• performing, by a fourth operation of the data privacy pipeline, at least one sanitation operation on the derived joint data to generate the collaborative data comprising an exposable portion accessible to one or more of the tenants and a restricted portion inaccessible to any of the tenants.

A method comprising:

• storing, in a data trustee environment, a representation of a data privacy pipeline defined by a tenant agreement among different data owners, the data privacy pipeline configured to derive collaborative data from input datasets provided by the different data owners without exposing the input datasets;
• fusing, by the data privacy pipeline, ingested data from the input datasets to generate fused joint data;
• performing, by the data privacy pipeline, at least one computation on the fused joint data to generate derived joint data;
• performing, by the data privacy pipeline, at least one sanitation operation on the derived joint data to generate the collaborative data comprising an exposable portion accessible to one or more of the different data owners and a restricted portion inaccessible to any of the different data owners.